The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101914: Partial String Comparison6.5 MediumN/A0%Sep 28, 2026
CVE-2026-101139: Missing Authorization2.7 Low2.0 Low0%Sep 28, 2026
CVE-2026-101908: Improperly Controlled Modification of Object Prototype AttributesN/A6.9 Medium0%Sep 28, 2026
CVE-2026-101904: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A6.9 Medium0%Sep 28, 2026
CVE-2026-101900: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A6.9 Medium1%Sep 28, 2026
CVE-2026-96538: Missing AuthorizationN/A8.7 High0%Sep 28, 2026
CVE-2026-93540: Incorrect Privilege Assignment6.5 MediumN/A0%Sep 28, 2026
CVE-2026-93538: Authentication Bypass by Spoofing7.1 HighN/A0%Sep 28, 2026
CVE-2026-97335: Incorrect Authorization7.7 HighN/A0%Sep 28, 2026
CVE-2026-86335: Missing Authorization6.3 MediumN/A0%Sep 28, 2026
CVE-2026-82930: Missing Authentication for Critical FunctionN/A6.4 Medium0%Sep 28, 2026
CVE-2026-82323: Authorization Bypass Through User-Controlled Key8.1 HighN/A0%Sep 28, 2026
CVE-2026-19759: Incorrect AuthorizationN/A9.4 Critical0%Sep 28, 2026
CVE-2026-82383: Missing Authentication for Critical Function8.2 HighN/A0%Sep 28, 2026
CVE-2026-82378: Incorrect Authorization9.0 CriticalN/A0%Sep 28, 2026
CVE-2026-82377: Missing Authorization9.9 CriticalN/A1%Sep 28, 2026
CVE-2026-82348: Authorization Bypass Through User-Controlled Key7.7 HighN/A0%Sep 28, 2026
CVE-2026-101006: Incorrect Authorization4.3 Medium2.1 Low0%Sep 28, 2026
CVE-2026-101000: Missing Authorization10.0 Critical9.3 Critical1%Sep 28, 2026
CVE-2026-100897: Authorization Bypass Through User-Controlled Key5.5 Medium5.1 Medium0%Sep 28, 2026
CVE-2026-100885: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium1%Sep 27, 2026
CVE-2026-101090: URL Redirection to Untrusted Site9.8 Critical9.3 Critical0%Sep 27, 2026
CVE-2026-101086: Improper Privilege Management6.5 Medium7.1 High0%Sep 27, 2026
CVE-2026-101084: Authorization Bypass Through User-Controlled Key9.6 Critical9.3 Critical0%Sep 27, 2026
CVE-2026-101062: Incorrect Authorization8.8 High8.7 High0%Sep 27, 2026
1326-1350 of 12074
‹›